Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/f4ca3b-a99a-4c72-96af-136dad97d0da/1/AKGRL91T8vGf6bza51RJZoFZM8w.mft
File: AKGRL91T8vGf6bza51RJZoFZM8w.mft (raw, json)
Hash identifier: 76/9UjbQ12Clw7mJvM7NWfOBFUVI79SWjv6fPpceP7I=
Subject key identifier: 93:3B:5A:2A:90:37:18:71:3E:43:2E:B9:51:5C:17:A0:9D:AE:76:D4
Authority key identifier: 00:A1:91:2F:DD:53:F2:F1:9F:E9:BC:DA:E7:54:49:66:81:59:33:CC
Certificate issuer: /CN=00a1912fdd53f2f19fe9bcdae7544966815933cc
Certificate serial: 01A1201C44B0C7D86912F9FDFF83F0A69DDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AKGRL91T8vGf6bza51RJZoFZM8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/f4ca3b-a99a-4c72-96af-136dad97d0da/1/AKGRL91T8vGf6bza51RJZoFZM8w.mft
Manifest number: 019C
Signing time: Fri 09 Oct 2026 10:01:25 +0000
Manifest this update: Fri 09 Oct 2026 10:01:25 +0000
Manifest next update: Sat 10 Oct 2026 10:01:25 +0000
Files and hashes: 1: AKGRL91T8vGf6bza51RJZoFZM8w.crl (hash: L2FIMvGuiAMUw1H76Yk8yjtH9FTXG2SB7GcjiR117vI=)
2: GzOvk8lHsu4BYLj1d10xgx8tglU.roa (hash: qwnpR7TfGpJqvG2MvNeXDUXWtBVeH7xIX0oA5goxnbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/f4ca3b-a99a-4c72-96af-136dad97d0da/1/AKGRL91T8vGf6bza51RJZoFZM8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/f4ca3b-a99a-4c72-96af-136dad97d0da/1/AKGRL91T8vGf6bza51RJZoFZM8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/AKGRL91T8vGf6bza51RJZoFZM8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:1c:44:b0:c7:d8:69:12:f9:fd:ff:83:f0:a6:9d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00a1912fdd53f2f19fe9bcdae7544966815933cc
Validity
Not Before: Oct 9 10:01:25 2026 GMT
Not After : Oct 10 10:01:25 2026 GMT
Subject: CN=933b5a2a903718713e432eb9515c17a09dae76d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:55:68:29:e2:6c:a2:9a:68:f4:3f:26:89:75:
7a:dd:ee:c6:93:c9:d2:da:58:73:6c:fb:77:2b:9c:
8a:ea:b7:08:97:cd:a4:c7:b3:b1:41:58:60:9f:41:
6a:e0:27:10:b4:85:c0:46:ce:9e:e3:2b:c8:13:c8:
b9:b6:a5:a7:73:d7:be:49:87:8b:ea:9c:12:a1:bb:
28:be:82:08:9e:4a:c7:cb:0d:43:28:b7:a3:ca:26:
d7:2b:40:e7:ef:6c:bc:6d:be:57:91:47:05:5b:35:
be:1b:00:82:1f:66:a7:8d:4e:63:f5:97:50:a7:36:
93:50:67:c3:ae:b6:51:38:43:b1:2d:06:2d:68:31:
9f:70:17:2b:ee:27:46:cf:df:ed:34:e9:e8:80:43:
80:42:b3:7a:5a:3d:76:a0:a3:3a:5c:54:c0:74:cd:
70:2c:b5:df:c4:17:29:c8:64:d6:cd:ae:cb:83:f9:
b8:a4:e8:c4:83:1d:f0:fb:49:69:03:44:7c:25:cf:
e0:52:a8:2a:76:d1:6f:9a:81:84:2a:e2:ad:79:57:
83:8c:1a:14:01:01:54:77:08:6d:d4:95:a1:8e:42:
b3:a3:23:4a:ec:7a:7f:37:00:41:04:44:c5:97:9b:
3c:a3:6e:22:9d:9a:bf:c1:63:49:f5:5f:95:c1:56:
9b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:3B:5A:2A:90:37:18:71:3E:43:2E:B9:51:5C:17:A0:9D:AE:76:D4
X509v3 Authority Key Identifier:
keyid:00:A1:91:2F:DD:53:F2:F1:9F:E9:BC:DA:E7:54:49:66:81:59:33:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AKGRL91T8vGf6bza51RJZoFZM8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f4ca3b-a99a-4c72-96af-136dad97d0da/1/AKGRL91T8vGf6bza51RJZoFZM8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f4ca3b-a99a-4c72-96af-136dad97d0da/1/AKGRL91T8vGf6bza51RJZoFZM8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:61:ae:dc:80:78:8a:24:5e:43:75:34:56:1a:fc:e0:0b:7d:
f1:29:7b:f2:7f:3f:ce:60:f5:98:6e:69:fc:f6:95:a5:1f:ec:
03:91:9a:d5:1b:5c:da:da:bb:16:b5:1c:83:96:fb:8c:fa:ca:
4a:aa:81:cd:38:9f:b7:6a:0b:79:b4:e7:9a:31:69:57:66:d6:
94:17:0f:ff:5f:e8:0f:1c:59:d2:a9:e2:64:f4:80:d3:b6:ab:
14:eb:db:bc:e4:4d:86:4e:6f:9a:ee:a5:c1:9f:95:fc:57:61:
9f:4a:bf:ea:76:5e:c7:41:4f:14:16:c0:ad:2b:6d:e6:f0:a4:
3b:e8:82:31:de:bd:08:4a:b5:b0:c8:9b:76:e6:72:b0:29:9f:
81:e2:04:ea:4a:ff:8f:87:89:dd:35:0f:d5:90:cf:bf:84:36:
d3:26:53:3c:fd:84:2b:62:1a:12:f9:da:e4:90:12:ca:97:66:
88:7a:39:70:e6:08:a5:96:9a:05:99:97:24:2f:c6:e7:67:d2:
14:e5:f9:b7:7b:62:c9:b2:9e:7e:cb:82:15:74:a9:d8:d7:77:
07:3e:e0:19:75:18:e8:4d:0d:f1:9c:32:cb:32:1d:d4:96:e5:
c6:96:08:f2:a3:ee:98:e9:0e:7f:08:ce:de:a4:34:55:f9:9e:
99:75:84:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEgHESwx9hpEvn9/4Pwpp3aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwYTE5MTJmZGQ1M2YyZjE5ZmU5YmNkYWU3NTQ0OTY2ODE1
OTMzY2MwHhcNMjYxMDA5MTAwMTI1WhcNMjYxMDEwMTAwMTI1WjAzMTEwLwYDVQQD
Eyg5MzNiNWEyYTkwMzcxODcxM2U0MzJlYjk1MTVjMTdhMDlkYWU3NmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFVoKeJsoppo9D8miXV63e7Gk8nS
2lhzbPt3K5yK6rcIl82kx7OxQVhgn0Fq4CcQtIXARs6e4yvIE8i5tqWnc9e+SYeL
6pwSobsovoIInkrHyw1DKLejyibXK0Dn72y8bb5XkUcFWzW+GwCCH2anjU5j9ZdQ
pzaTUGfDrrZROEOxLQYtaDGfcBcr7idGz9/tNOnogEOAQrN6Wj12oKM6XFTAdM1w
LLXfxBcpyGTWza7Lg/m4pOjEgx3w+0lpA0R8Jc/gUqgqdtFvmoGEKuKteVeDjBoU
AQFUdwht1JWhjkKzoyNK7Hp/NwBBBETFl5s8o24inZq/wWNJ9V+VwVabLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJM7WiqQNxhxPkMuuVFcF6CdrnbUMB8GA1UdIwQY
MBaAFAChkS/dU/Lxn+m82udUSWaBWTPMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUtHUkw5MVQ4dkdmNmJ6YTUxUkpab0ZaTTh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9mNGNhM2ItYTk5YS00YzcyLTk2YWYt
MTM2ZGFkOTdkMGRhLzEvQUtHUkw5MVQ4dkdmNmJ6YTUxUkpab0ZaTTh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9mNGNhM2ItYTk5YS00YzcyLTk2YWYtMTM2ZGFkOTdkMGRh
LzEvQUtHUkw5MVQ4dkdmNmJ6YTUxUkpab0ZaTTh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2mGu3IB4
iiReQ3U0Vhr84At98Sl78n8/zmD1mG5p/PaVpR/sA5Ga1Rtc2tq7FrUcg5b7jPrK
SqqBzTift2oLebTnmjFpV2bWlBcP/1/oDxxZ0qniZPSA07arFOvbvORNhk5vmu6l
wZ+V/Fdhn0q/6nZex0FPFBbArStt5vCkO+iCMd69CEq1sMibduZysCmfgeIE6kr/
j4eJ3TUP1ZDPv4Q20yZTPP2EK2IaEvna5JASypdmiHo5cOYIpZaaBZmXJC/G52fS
FOX5t3tiybKefsuCFXSp2Nd3Bz7gGXUY6E0N8ZwyyzId1JblxpYI8qPumOkOfwjO
3qQ0VfmemXWEOA==
-----END CERTIFICATE-----
Generated at Fri Oct 9 17:42:54 2026 by rpki-client